Blockstream Jade vs Coldcard: Bitcoin Signers Compared

Jade vs Coldcard at a Glance

Blockstream Jade and Coldcard represent two fundamentally different approaches to Bitcoin hardware signing devices. Jade targets accessibility: a sub-$150 price, Bluetooth connectivity, built-in battery, and Liquid Network support. Coldcard targets security maximalists: dual secure element chips, duress PINs, and a MicroSD-based air-gapped workflow designed to never touch a network-connected device.

Both are Bitcoin-only signers with no altcoin support, full PSBT compatibility, and open-source firmware. The core tradeoff is Jade's oracle-based virtual secure element versus Coldcard's physical dual secure elements: two radically different answers to the same question of how to protect private keys at rest.

Note: The Coldcard Mk4 is being phased out in favor of the Mk5 ($167), which retains the same dual-SE security model but adds a larger 1.54" Gorilla Glass display. Coinkite also offers the Coldcard Q ($249), a larger-format device with a QWERTY keyboard, QR scanner, and battery power.

Security Architecture

The most significant difference between these two devices is how they protect your seed phrase at rest. For a broader look at hardware wallet threat models, see our research on Bitcoin hardware wallet attack vectors.

Jade: Virtual Secure Element

Jade contains no hardware secure element. Instead, it implements an open-source protocol Blockstream calls a "virtual secure element." The recovery phrase is stored encrypted on the device, but the decryption key is never stored anywhere. On each unlock, three components derive the key: the user's PIN entered on the device, a secret held in the Jade hardware, and a secret held by a remote blind oracle server.

The oracle is "truly blind": it participates in an ephemeral ECDH key exchange with the device but never learns the user's PIN, addresses, or private keys. All oracle-side data is encrypted, and communication happens over Tor. An attacker would need to compromise both the physical device and the oracle server simultaneously to extract keys.

If Blockstream's oracle server goes offline, users have three fallback options: enter the recovery phrase directly on the device, deploy a self-hosted oracle server using Blockstream's open-source code, or operate Jade in fully stateless mode where the seed is re-entered on every power cycle. The oracle is a convenience layer, not a single point of failure.

Coldcard: Dual Hardware Secure Elements

Coldcard takes the opposite approach: two dedicated secure element chips from different manufacturers (Microchip ATECC608B and Maxim DS28C36B) store the master secret. These tamper-resistant chips are designed to resist physical extraction attacks including decapping, probing, and side-channel analysis. The dual-vendor approach means a vulnerability in one chip's silicon does not automatically compromise the device.

Coldcard also offers duress features unique among consumer hardware wallets. A "duress PIN" unlocks a separate decoy wallet derived from the same seed, with no visible indication that duress mode is active. A "brick-me PIN" irreversibly destroys both secure elements in approximately 50 milliseconds when entered at any PIN prompt, rendering the device permanently unusable.

Air-Gap and Connectivity

Both devices support fully air-gapped operation, meaning they can sign transactions without ever connecting to a computer via USB. The mechanisms differ significantly.

Jade Plus uses a built-in camera to scan QR codes displayed by the companion wallet software, then displays a signed QR code on its screen for the software to scan back. This camera-based workflow is fast and requires no physical media. The built-in 280 mAh battery enables fully wireless operation. Jade also supports USB-C, Bluetooth, and MicroSD for users who prefer wired or card-based workflows.

Coldcard Mk4 uses MicroSD cards as its primary air-gap medium. Unsigned PSBTs are saved to a MicroSD card from the companion wallet, inserted into the Coldcard for signing, then returned to the computer. Coldcard also supports NFC for mobile signing with compatible apps like Nunchuk. The Mk4 has no battery: it must be powered via USB-C, though it does not need to be connected to a computer (a USB power bank works).

Companion Software and Workflow

Jade ships with Blockstream Green as its primary companion wallet. Green is available on desktop (Linux, macOS, Windows) and mobile (iOS, Android) and supports singlesig, 2-of-2 multisig, and Liquid Network assets. Jade also works with third-party coordinators: Sparrow, Specter Desktop, and Nunchuk all support Jade over USB, QR, or both.

Coldcard has no proprietary companion app. Coinkite intentionally relies on the broader ecosystem of Bitcoin wallet software. Sparrow Wallet is the most common pairing and offers deep Coldcard integration including one-click PSBT export, xpub import, and multisig setup. Coldcard also works with Electrum, Bitcoin Core, BlueWallet, BTCPay Server, Specter Desktop, and Casa for collaborative custody setups.

For a broader survey of signing device options, see our Bitcoin hardware wallet comparison.

Liquid Network and Asset Support

Jade is one of the few hardware wallets that natively supports the Liquid Network, Blockstream's federated Bitcoin sidechain. Users can send and receive L-BTC as well as Liquid-issued assets (including L-USDt and other tokens) directly through Blockstream Green. This makes Jade a natural fit for users who want confidential transactions, faster settlement, or access to Liquid-based token issuance.

Coldcard does not support Liquid Network or any sidechain. It is strictly a Bitcoin mainchain signer. Users who need both mainchain and Liquid support would need a separate device or software wallet for Liquid operations.

Multisig and Advanced Signing

Both devices are strong choices for multisig setups, which remain the gold standard for protecting larger Bitcoin holdings. Both export xpubs, sign PSBTs, and work with popular multisig coordinators.

Coldcard has a slight edge in multisig workflow maturity: it can store and verify registered multisig wallet configurations on-device, display co-signer details during signing, and export descriptors in standard formats. Its Seed Vault feature allows storing multiple BIP-39 passphrase-derived wallets, useful for users who manage several multisig quorums from a single device.

Both devices support BIP-85 for deterministic generation of child seeds from a master seed. This lets users create separate 12- or 24-word recovery phrases for specific purposes (a mobile wallet, a Lightning node) without managing multiple independent backups.

Open-Source and Auditability

Jade is fully open source: firmware (MIT and GPL-3.0), hardware schematics, and bill of materials are all published on GitHub. Reproducible builds allow users to compile firmware from source and verify it matches the official release. The Jade hardware runs on an ESP32-S3 microcontroller, a general-purpose chip whose architecture is well-documented.

Coldcard's firmware source code is publicly available on GitHub and supports reproducible builds. However, the hardware schematics, while viewable, carry a license that restricts reproduction for cloning purposes. This is a pragmatic middle ground: the design is auditable but not freely reproducible. Coldcard's reliance on proprietary secure element chips also means that portions of the security stack cannot be independently verified at the silicon level.

As of mid-2026, Blockstream has announced intent to pursue an independent third-party security audit of Jade's source code but has not yet published results.

Price and Product Lineup

At $99, the Jade Core is the cheapest reputable cold storage option on the market (excluding DIY builds like SeedSigner). The Jade Plus at $149 and Coldcard Mk5 at $167 are near price parity, making the decision primarily about security philosophy rather than budget.

Which Device Should You Choose

Choose Jade if you want Liquid Network support, a camera-based QR air-gap, Bluetooth connectivity for mobile signing, or a device under $100 (Jade Core). Jade's oracle-based security model is novel but well-designed: the blind server never learns your keys, and multiple fallback paths exist if the oracle is unavailable.

Choose Coldcard if you prioritize hardware-enforced key isolation via dedicated secure elements, want duress and brick-me PIN features, or prefer a device with no wireless radios of any kind (no Bluetooth, no WiFi). Coldcard's MicroSD workflow is slower than QR scanning but eliminates any wireless attack surface.

For multisig setups, consider using both: mixing signing device vendors across a quorum (for example, one Jade and two Coldcards in a 2-of-3) provides defense in depth against any single vendor's firmware or hardware vulnerability. Both devices support self-custody workflows through standard PSBT signing, making them interoperable in any multisig coordinator.

Frequently Asked Questions

Is Blockstream Jade safe without a secure element?

Jade's virtual secure element provides a different security model, not an inferior one. The blind oracle protocol ensures that neither the device alone nor the server alone can derive the decryption key for your seed. An attacker must compromise both simultaneously. The entire protocol is open source and auditable, and users can self-host the oracle or bypass it entirely by entering their recovery phrase directly.

What happens if Blockstream shuts down the Jade oracle server?

You can still access your funds through three paths: enter your seed phrase manually on the device, run a self-hosted oracle server using Blockstream's open-source code, or use Jade in stateless mode where the seed is re-entered on each power cycle. The oracle is a convenience feature for PIN-based unlocking, not a custodial dependency.

Can Coldcard sign Liquid Network transactions?

No. Coldcard supports Bitcoin mainchain only. If you need hardware wallet support for the Liquid Network, Blockstream Jade is currently the primary option. Liquid transactions can be signed through Blockstream Green paired with a Jade device.

Which device is better for multisig?

Both work well for multisig, but Coldcard has more mature on-device multisig verification features, including stored wallet configurations and co-signer display during signing. For maximum security, consider using devices from different vendors in your multisig quorum. See our multisig setup comparison for coordinator options.

Does Jade Plus work fully air-gapped?

Yes. With its built-in camera and battery, Jade Plus can operate entirely air-gapped via QR code exchange. It scans an unsigned PSBT displayed as a QR code by the companion wallet, signs the transaction offline, and displays the signed result as a QR code for the wallet to scan. No USB, Bluetooth, or network connection is required.

What is the Coldcard brick-me PIN?

The brick-me PIN is a user-configured PIN that, when entered at any PIN prompt on the Coldcard, irreversibly destroys both secure element chips. The destruction completes in approximately 50 milliseconds with no on-screen confirmation. This is designed as a last-resort measure if the device is at risk of physical seizure or coercion. Your funds remain recoverable from your seed phrase backup.

Can I use Jade and Coldcard with the same wallet software?

Yes. Both devices work with Sparrow Wallet, Specter Desktop, and Nunchuk, among others. This interoperability is critical for mixed-vendor multisig setups. Sparrow in particular offers strong integration with both Jade (over USB and QR) and Coldcard (over USB, MicroSD, and NFC).

This tool is for informational purposes only and does not constitute financial advice. Hardware wallet features and pricing change over time. Always verify current specifications on the manufacturer's website before purchasing. Security models involve tradeoffs: no single device is immune to all attack vectors.